CVE-2024-57080

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxykzzj2t 2025-02-06 01:50:58+00:00| seen| https://t.me/cvedetector/17347...

CVE-2024-57076

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxp6p4u2e 2025-03-18 20:48:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8007...

CVE-2024-57069

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxcibe72i 2025-02-06 01:51:07+00:00| seen| https://t.me/cvedetector/17355...

CVE-2022-33273

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation...

CVE-2024-57085

creationtimestamp| type| source ---|---|--- 2025-02-05 21:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953412401038570 2025-02-05 22:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlycsrxt2c 2025-02-06 01:51:00+00:00| seen|...

CVE-2022-48597

A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48601

A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

CVE-2022-48591

A SQL injection vulnerability exists in the vendorstate parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the...

CVE-2025-24372

creationtimestamp| type| source ---|---|--- 2025-02-05 19:18:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz3wxog2b 2025-02-05 21:39:46+00:00| seen| https://t.me/cvedetector/17316 2025-02-05 22:33:54+00:00| seen|...

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

CVE-2025-23412

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610558009604 2025-02-05 18:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kly63a2r 2025-02-05 21:40:07+00:00| seen|...

CVE-2025-24326

creationtimestamp| type| source ---|---|--- 2025-02-05 17:54:26+00:00| seen| https://t.me/cKure/14288 2025-02-05 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6l6f46j2b 2025-02-05 18:37:29+00:00| seen|...

CVE-2020-5302

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

CVE-2020-13533

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs...

CVE-2020-13532

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13534

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers CLSID, installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger...

CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...

CVE-2024-9097

creationtimestamp| type| source ---|---|--- 2025-02-05 12:54:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113951379139648292 2025-02-05 13:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgnptmjfe2c 2025-02-05 14:58:13+00:00| seen|...